Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS147287.roa
File: AS147287.roa (raw, json)
Hash identifier: L8QpeKuqr64ElMpYs6I+BF58WB+r7x/CXX/TCuVcQew=
Subject key identifier: 20:D5:4D:31:D6:7C:6D:19:6F:23:58:B5:3E:41:E1:5C:30:29:20:58
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 79E2F939F163E94F59ACAC81371903162A0852E7
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS147287.roa
Signing time: Mon 10 Jul 2023 00:00:06 +0000
ROA not before: Sun 09 Jul 2023 23:55:06 +0000
ROA not after: Mon 08 Jul 2024 00:00:06 +0000
asID: 147287
IP address blocks: 74.50.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jul 2023 14:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:e2:f9:39:f1:63:e9:4f:59:ac:ac:81:37:19:03:16:2a:08:52:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Jul 9 23:55:06 2023 GMT
Not After : Jul 8 00:00:06 2024 GMT
Subject: CN=20D54D31D67C6D196F2358B53E41E15C30292058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bf:06:e2:61:e7:86:49:d4:ec:0e:9c:b3:18:
6a:50:47:5c:25:14:0c:2e:ea:ca:f6:d3:a4:b7:f1:
d1:f8:f2:0f:f8:40:55:ba:43:d8:64:a2:de:42:23:
e6:c5:f5:ab:be:47:3b:52:c3:a5:92:4d:6b:a8:6f:
29:81:9e:67:50:f0:f3:53:e1:e5:f0:37:6a:db:4b:
96:46:3a:ae:1a:42:35:e1:57:e1:71:c5:3c:4a:ff:
02:b9:cf:74:05:49:a6:02:f8:21:d5:89:61:a9:ae:
29:22:49:b7:ba:bf:64:be:23:0b:5b:c2:81:bd:5a:
62:c1:e3:5c:45:9d:e4:22:a4:a0:f8:62:c0:b6:79:
e9:f8:a2:bf:46:7c:c1:9d:aa:82:cb:b0:4a:10:c0:
a6:7f:38:e1:6a:80:fe:72:b8:13:9b:ce:94:b2:ec:
0e:d6:b6:73:33:b4:6d:67:17:cc:d0:02:1f:5b:d0:
d8:54:37:d9:04:8c:98:0a:cc:79:7b:e9:4d:a2:ac:
72:76:62:84:96:25:4a:2d:35:5e:dd:21:5f:e8:40:
30:85:3d:f5:3c:a1:d3:1b:90:17:47:43:c2:fa:43:
bc:15:e9:b5:23:58:6e:49:71:38:42:7b:c3:22:c3:
3f:78:56:41:5b:b9:d1:27:ff:74:57:bb:15:59:3e:
59:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D5:4D:31:D6:7C:6D:19:6F:23:58:B5:3E:41:E1:5C:30:29:20:58
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS147287.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.50.0.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:14:e0:eb:3a:94:ba:ee:b7:e7:94:e6:e3:49:e9:fd:cf:e6:
13:d5:56:c8:f9:b6:ed:83:f9:6f:d0:19:83:77:1c:b4:4c:99:
72:2e:93:71:99:de:3b:eb:f0:3a:36:98:ab:7e:33:a1:5b:64:
af:a4:53:09:3b:34:8d:3d:74:2b:05:29:84:01:a8:b2:7d:54:
d6:91:36:da:70:b5:d5:03:0c:fb:63:17:70:36:11:54:6e:bb:
ca:22:9e:6d:46:a9:5f:6b:7e:31:f9:64:e8:0e:68:8e:7c:ba:
33:02:0a:4c:71:f0:8f:47:91:f7:f9:41:f2:69:e2:67:a3:e6:
73:54:56:39:96:10:15:ad:b7:0c:bd:d9:21:51:52:ab:c2:44:
da:8f:56:3d:4a:9b:87:0f:8a:ce:0c:6b:5c:1e:c0:51:15:0d:
30:e1:d7:29:bd:c2:23:b0:bd:96:a0:16:b6:76:24:d5:bb:41:
80:9f:ab:33:d8:1c:e0:db:e9:f4:22:97:7a:f1:f0:99:0a:ae:
e2:f7:fb:a2:05:8d:55:21:bc:29:d1:03:b9:35:72:0e:8f:cf:
2c:7d:2b:88:3a:2e:0d:da:72:87:bb:79:9f:6b:aa:d8:17:37:
ee:f2:6b:dc:30:d7:60:85:5c:6c:79:74:c7:73:e6:42:0d:eb:
05:a6:cd:32
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUeeL5OfFj6U9ZrKyBNxkDFioIUucwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjMwNzA5MjM1NTA2WhcNMjQwNzA4MDAwMDA2
WjAzMTEwLwYDVQQDEygyMEQ1NEQzMUQ2N0M2RDE5NkYyMzU4QjUzRTQxRTE1QzMw
MjkyMDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL8G4mHnhknU
7A6csxhqUEdcJRQMLurK9tOkt/HR+PIP+EBVukPYZKLeQiPmxfWrvkc7UsOlkk1r
qG8pgZ5nUPDzU+Hl8Ddq20uWRjquGkI14VfhccU8Sv8Cuc90BUmmAvgh1Ylhqa4p
Ikm3ur9kviMLW8KBvVpiweNcRZ3kIqSg+GLAtnnp+KK/RnzBnaqCy7BKEMCmfzjh
aoD+crgTm86UsuwO1rZzM7RtZxfM0AIfW9DYVDfZBIyYCsx5e+lNoqxydmKEliVK
LTVe3SFf6EAwhT31PKHTG5AXR0PC+kO8Fem1I1huSXE4QnvDIsM/eFZBW7nRJ/90
V7sVWT5ZbwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFCDVTTHWfG0ZbyNYtT5B4Vww
KSBYMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzE0NzI4Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAEoyADANBgkqhkiG9w0BAQsFAAOC
AQEAmxTg6zqUuu6355Tm40np/c/mE9VWyPm27YP5b9AZg3cctEyZci6TcZneO+vw
OjaYq34zoVtkr6RTCTs0jT10KwUphAGosn1U1pE22nC11QMM+2MXcDYRVG67yiKe
bUapX2t+Mflk6A5ojny6MwIKTHHwj0eR9/lB8mniZ6Pmc1RWOZYQFa23DL3ZIVFS
q8JE2o9WPUqbhw+KzgxrXB7AURUNMOHXKb3CI7C9lqAWtnYk1btBgJ+rM9gc4Nvp
9CKXevHwmQqu4vf7ogWNVSG8KdEDuTVyDo/PLH0riDouDdpyh7t5n2uq2Bc37vJr
3DDXYIVcbHl0x3PmQg3rBabNMg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:40 2024 by rpki-client on console-ams.rpki-client.org